NetSight
critical9.6

CVE-2024-40867

A custom URL scheme handling issue was addressed with improved input validation.

Impact

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.

Affected products

VendorProductAffected versions
AppleIpados
before 18.1
AppleIphone Os
before 18.1

References